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NETWORK CONVERTER AND INFORMATION PROCESSING SYSTEM 

CROSS-REFERENCE TO RELATED APPLICATIONS 

The present application claims priority upon Japanese 
5 Patent Application No. 2003-343479 filed on October 1, 2003 , 
which is herein incorporated by reference. 

BACKGROUND OF THE INVENTION 

1 . Field of the Invention 

10 The present invention relates to a network converter and 

an information processing system. 

2 . Description of the Related Art 

Along with an improved communication speed of a LAN (Local 
Area Network) , there has been rapid advancement in construction 

15 of an information processing system which transmits /receives 
data by using an iSCSI (internet Small Computer Systems 
Interface) protocol between an information processing device 
and a storage device. Details of the iSCSI protocol are 
described in "iSCSI" by Julian Satran and four others ( [online] , 

20 Hei 15(2003) January 19, USA IETF (The Internet Engineering 
Task Force), [search on Hei 15(2003) September 11], Internet 
<URL : http : / /www . iet f - org/ internet-drafts /draf t-iet f -ips- 
iscsi-20 . txt>) . 

Also in such an environment, there has arisen a need to 

25 effectively use the storage device connected to the information 
processing device by use of a conventionally used Fibre Channel . 
Accordingly, a network converter has been used, which converts 
iSCSI protocol data and Fibre Channel protocol data between 
each other. As a representative example of the network 
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converter, there is "SN5428 Storage Router" by Cisco Systems , 
Inc. Details of a method for setting the network converter and 
the- like are described in Cisco Systems Inc., "Cisco SN5428 
Storage Router Software Configuration Guide" ([online], Hei 
5 15(2003) June 24, Cisco Systems Inc., [search on Hei 15(2003) 
September 11 ] , Internet <http: //www. cisco.com/japanese/ 
warp/public /3 / jp/service/manual_j /rt/5 00 0/2 8srscg/index.ht 
ml>). 

As shown in Fig. 9, such a network converter includes a 

10 protocol conversion section 903 which converts an iSCSI 
protocol and a Fibre Channel protocol between each other, a 
WWN (World Wide Name) allocation section 904 and an extended 
instruction issuing section 905. The protocol conversion 
section 903 receives an IP packet from an information processing 

15 device 901 via a LAN, converts the IP packet into a Fibre Channel 
frame (hereinafter referred to as a "FC frame") and transmits 
the FC frame to a storage device 908. 

Generally, when the information processing device has 
access to the storage device, the access is limited from the 

20 viewpoint of security. For example, there is LUN security 
which controls the access of the information processing device 
for each LUN (Logical Unit Number) that is a management number 
of a logical volume existing in a disk. In the LUN security, 
an identification number for identifying the information 

25 processing device is required and a WWN (World Wide Name) is 
often used in the case of the Fibre Channel. Details of the 
LUN security are described in Japanese Patent Application 
Laid-Open Publication No. 2000-276406. 

It is required to realize the LUN security described above 

30 also in the case of the access via the LAN as shown in Fig. 
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9. Accordingly, a method for identifying the information 
processing device 901 by the storage device 908 is required. 
In the above-described "SN54 28 Storage Router" by Cisco Systems 
Inc., the WWN allocation section 9 04 sequentially allocates 
5 WWNs, which are set in a WWN management table 907 stored in 
a memory 90 6, to the respective information processing devices 
901. Thus, a different WWN may be allocated to the same 
information processing device 901 for each access. 
Consequently, it is impossible to realize the LUN security using 

10 the WWNs in the storage device 908. Accordingly, the network 
converter 9 02 includes the extended instruction issuing 
section 905 which inserts an iSCSI name of the information 
processing device into an FC frame. The FC frame is not an 
instruction prepared in the Fibre Channel protocol. Thus, in 

15 order to realize the LUN security using the FC frame, it is 
required that an extended instruction analysis section 909 
which analyzes the frame is provided in the storage device 908. 
The extended instruction analysis section 909 obtains the iSCSI 
name of the information processing device from the FC frame 

20 and controls the LUN security based on a security management 
table 911. 

In order to realize the LUN security by use of the 
above-described method, it is required that the extended 
instruction analysis section 90 9 and the like are newly provided 

25 in the storage device 908. Accordingly, it is required to 
communicate with the information processing device, which 
transmits /receives data by use of the iSCSI protocol, in 
consideration for the LUN security without adding new 
components and the like to the storage device which 

30 transmits /receives data by use of the conventionally used Fibre 
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Channel protocol as described above. 

SUMMARY OF THE INVENTION 

It is an object of the present invention to provide a 
5 network converter and an information processing system which 
solve the foregoing problems. 

A network converter according to one embodiment of the 
present invention is connected to an information processing 
device and a storage device so as to be communicable and 
10 comprises: 

a first protocol conversion section which converts data 
received from the information processing device according to 
a first protocol into data having a form determined by a Fibre 
Channel protocol and transmits the data to the storage device; 
15 a second protocol conversion section which converts data 

received from the storage device according to the Fibre Channel 
„ protocol into data having a form determined by the first 
protocol and transmits the data to the information processing 
device; 

20 a conversion table storage section which stores in a 

conversion table a combination of a first identification number 
which is a number for identifying the information processing 
device and the storage device according to the first protocol, 
and a second identification number which is a number for 

25 identifying the information processing device and the storage 
device according to the Fibre Channel protocol; 

a first identification number conversion section which 
converts the first identification number into the second 
identification number in accordance with contents stored in 

30 the conversion table; and 
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a second identification number conversion section which 
converts the second identification number into the first 
identification number in accordance with contents stored in 
the conversion table, 
5 Here, the first protocol may be, for example, an iSCSI 

protocol and the first identification number may be an iSCSI 
name. Moreover, the second identification number may be, for 
example, a WWN which is an identification number of the 
information -processing device and the storage device in the 
10 Fibre Channel protocol. 

Features and objects of the present invention other than 
the above will become clear by reading the description of the 
present specification with reference to the accompanying 
drawings . 

15 

BRIEF DESCRIPTION OF THE DRAWINGS 

For a more complete understanding of the present 
invention and the advantages thereof, reference is now made 
to the following description taken in conjunction with the 
20 accompanying drawings wherein: 

Fig. 1 is a block diagram showing an example of an entire 
information processing system according to a first embodiment; 

Fig. 2 is a view showing an example of a conversion table 
according to the first embodiment; 
25 Fig. 3 is a view showing an example of a security 

management table according to the first embodiment; 

Fig. 4 is an example of a flowchart of a management 
terminal according to the first embodiment; 

Fig. 5 is a view showing a conversion example from an IP 
30 packet into an FC frame in performing login processing of iSCSI 
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according to the first embodiment; 

Fig. 6 is an example of a flowchart from login of iSCSI 
up to execution of a SCSI command in consideration of LUN 
security according to the first embodiment; 

Fig. 7 is a view showing an example of a login information 
storage table according to the first embodiment; 

Fig. 8 is a block diagram showing ah example of an entire 
information processing system according to a second 
embodiment ; and 

Fig. 9 is a block diagram showing an entire information 
processing system including a conventional network converter. 

DETAILED DESCRIPTION OF THE INVENTION 

At least the following matters will be made clear by the 
15 explanation in the present specification and the description 
of the accompanying drawings . 
===First Embodiment === 

First , Fig. 1 shows a block diagram of an entire 
configuration . example of an information processing system 
20 including network converters 2 0 according to a first embodiment 
of the present invention. 

The information processing system according to this 
embodiment includes information processing devices 10, the 
network converters 20 , storage devices 3 0 and a management 
25 terminal 40. 

—Information Processing Device— 

The information processing device 10 is a computer 
including a CPU (Central Processing Unit) and a memory. The 
CPU included in the information processing device 10 executes 
30 various programs. Thus, various types of processing are 
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realized. The information processing device 10 is utilized, 
for example, as a central computer in an ATM (Automated Teller 
Machine) system of a bank, a seat reservation system of an 
airline company and the like. The information processing 
5 device 10 can be implemented also as a mainframe computer and 
a personal computer . 

Moreover, the information processing device 10 is 
connected to the network converter 20 via a LAN so as to be 
communicable and transmits a data I/O request for the storage 

10 device 30 to the network converter 20. As the data I/O request, 
there are, for example, a data read request, a data write request 
and the like. Note that the information processing device 10 
communicates with the network converter 20 by use of an iSCSI 
protocol. As described above, the information processing 

15 device 10 according to this embodiment may be a conventional 
information processing device 10 capable of communicating 
using the iSCSI protocol. Thus, it is not required to add new 
components and the like. 
==Network converter== 

20 The network converter 20 is connected to the information 

processing device 10 via the LAN so as to be communicable and 
is connected to the storage device 30 via a SAN (Storage Area 
Network) so as to be communicable. In this embodiment, the SAN 
is a network in which communications are performed in accordance 

25 with a Fibre Channel protocol. Moreover, the network converter 
2 0 is connected to the management terminal 4 0 so as to be 
communicable . 

The network converter 20 includes a CPU 21, a memory 22 
and the like. The network converter 20 further includes a first 
30 protocol conversion section 23, a second protocol conversion 
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section 24 , a conversion table storage section 25, a first 
identification number conversion section 26, a second 
identification number conversion section 27 and the like, all 
of which are controlled by the CPU 21. Note that the first and 
5 second protocol conversion sections 23 and 24 may be included 
in one protocol conversion section and the first and the second 
identification number conversion sections 26 and 27 may be also 
included in one identification number conversion section. 

Furthermore, these conversion sections may be realized 
10 as software which is defined as a computer software program 
executed by the CPU 21. 

i 

A Combination of an identification number of the 
information processing device 10 and the storage device 3 0 
according to the iSCSI protocol and the Fibre Channel protocol 

15 is stored in a conversion table 28 in the memory 22. Here, the 
identification number according to the iSCSI protocol is an 
iSCSI name and the identification numbers according to the Fibre 
Channel protocol are an Node_Name and an N_Port_Name which are 
WWNs (World Wide Name) . 

20 The first protocol conversion section 23 converts a data 

I/O request for the storage device 30 according to the iSCSI 
protocol received from the information processing device 10 
into an FC frame of the Fibre Channel protocol and transmits 
the FC frame to the storage device 30. When the first protocol 

25 conversion section 2 3 converts an IP packet into an FC frame, 
the first identification number conversion section 2 6 converts 
iSCSI names of the information processing device 10 and the 
storage device 30 into WWNs. 

Moreover, the second protocol conversion section 24 

30 converts a response to a data I/O request according to the Fibre 



Channel protocol received from the storage device 30 into an 
IP packet of the iSCSI protocol and transmits the IP packet 
to the information processing device 10. When the second 
protocol conversion section 24 converts an FC frame into an 
5 IP packet, the second identification number conversion section 
27 converts WWNs of the information processing device 10 and 
the storage device 30 into iSCSI names. 

Upon receipt of combinations of the iSCSI names and WWNs 
of the information processing device 10 and the storage device 

10 30 from the management terminal 40 , the conversion table storage 
section 25 stores the combinations in the conversion table 28. 
==Storage Device== 

The storage device 30 is connected to the network 
converter 20 via the SAN so as to be communicable. The storage 

15 device 30 includes a controller 39 and a plurality of disks 
31. In the disks 31 are set logical volumes 32. The logical 
volume 32 is a logical storage area including a physical storage 
area the disk 31 has. Note that a LUN (Logical Unit Number) 
is given to each of the logical volumes 32. Moreover, the 

20 controller 39 includes a security management table 3 5 in a 
memory 34. Furthermore, the controller 39 includes a security 
management table storage section 33. This storage section 3 3 
may be realized by making a CPU included in the controller 3 9 
execute computer software programs or may be realized by use 

25 of dedicated hardware. 

The security management table 35 stores access 
enable/disable to the logical volumes for each of the 
information processing devices 10 accessing the storage 
devices or for each of the WWNs of the storage devices 30. Fig. 

30 3 shows an example of the security management table. In columns 
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of the WWNs, WWNs of the information devices 10 accessing the 
storage devices or those of the storage devices 30 are set. 
Moreover, in columns of LUNO to LUNn, access enable/disable 
for the respective LUNs of the logical volumes is set. Here, 
5 "1" indicates that the access is enabled and "0" indicates that 
the access is disabled. The storage device 30 realizes LUN 
security that is an access control for each LUN by use of this 
security management table 35. 

The storage device 30 according to this embodiment may 
10 be a conventional storage device 30 which performs 
communications according to the Fibre Channel protocol and 
performs the LUN security. Thus, it is not required to newly 
add components and the like. 
==Management terminal- 
is The management terminal 4 0 includes a CPU, an input unit, 
a display unit, an identification number conversion 
notification section, an access enable/disable notification 
section and the like and is a computer connected to the network 
converter and the storage device so as to be communicable. Note 
20 that the management terminal 4 0 may be connected to a plurality 
of network converters 2 0 and a plurality of storage devices 
30. Moreover, the management terminal 40 can be built into the 
network converter 2 0 or the storage device 30. 

The identification number conversion notification 
25 section notifies the conversion table storage section 25 
included in the network converter 2 0 of the combination of the 
iSCSI name and the WWN, which is stored in the conversion table. 
Moreover, the access enable/disable notification section 
notifies the security management table storage section 3 3 
30 included in the storage device 30 of the LUN access 



10 



enable/disable for each WWN, which is stored in the security 
management table. 

The management terminal 4 0 will be described in detail 
with referring to a flowchart of Fig. 4. 
5 First, the management terminal 4 0 receives a combination 

of a target network converter 2 0 and a target storage device 
30 from the input unit (S401). Thereafter, the management 
terminal 40 receives a combination of an iSCSI name and a WWN 
of the selected storage device 30 from the input unit (S402). 

10 Furthermore, the management terminal 40 receives a combination 
of an iSCSI name and a LUN of the information processing device 
10, for which access is enabled, from the input unit (S403). 
Subsequently, the management terminal 4 0 selects whether or 
not a WWN of the information processing device is automatically 

15 generated (S404) . In the case of automatically generating the 
WWN, the management terminal 4 0 automatically generates the 
WWN of the information processing device 10, for which the 
access is enabled (S405). As to a method for automatically 
generating the WWN, numbers within a fixed range may be 

20 allocated sequentially or randomly as long as a different WWN 
is allocated to each of the information processing devices 10. 
In the case of not automatically generating the WWN, the 
management terminal 4 0 receives a WWN of the information 
processing device 10, for which the access is enabled, from 

25 the input device (S406). 

Next, the management terminal 4 0 associates the WWN 
allocated to the information processing device 10, for which 
the access is enabled, with the LUN which can be accessed by 
the information processing device 10 that is previously 

30 inputted. Thereafter, the access enable/disable notification 



11 



section of the management terminal 4 0 transmits a combination 
of the WWN and the LUN of the information processing device 
10, for which the access is enabled, to the security management 
table storage section 33 of the storage device 30 (S407). In 
5 this event, the access enable/disable notification section 
transmits a WWN which controls access denial to the security 
management table storage section 33 so that access to the WWN 
for all LUNs is disabled. Here, the WWN which controls the 
access denial is, for example, "FFFFFFFF" or the like. 

10 Upon receipt of the combination described above, the 

security management table storage section 33 of the controller 
3 9 stores the combination in the security management table 3 5 
so as to permit access for the received combination of the WWN 
and the LUN. Specifically, for each of the received WWNs , "1" 

15 is set to the LUN for which access is enabled and "0" is set 
to the LUN not received for the WWN. Moreover, regarding the 
WWN which controls the access denial, the security management 
table storage section 33 sets "0" to all the LUNs for the WWN . 

Next, the identification number conversion notification 

20 section of the management terminal 4 0 transmits the combination 
of the iSCSI name and the WWN of the storage device 30 to the 
conversion table storage section 25 of the network converter 
20 (S408). Upon receipt of the combination described above, 
the conversion table storage section 25 stores the received 

25 combination of the iSCSI name and the WWN in the conversion 
table 28. Moreover, the management terminal 40 associates the 
WWN allocated to the information processing device 10 with the 
previously received iSCSI name of the information processing 
device 10. Accordingly, the identification number conversion 

30 notification section transmits the combination of the iSCSI 
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name and the WWN of the information processing device 10 , for 
which the access is enabled , to the conversion table storage 
section 25 (S409). In this event, the identification number 
conversion notification section also transmits the 
5 above-described WWN which controls the access denial to the 
conversion table storage section 25. Upon receipt of the 
combination, the conversion table storage section 2 5 stores 
the received combination of the iSCSI name and WWN in the 
conversion table 28, Moreover, the conversion table storage 

10 section 25 stores the WWN which controls the access denial in 
the conversion table 28. This is represented by a record in 
the conversion table 28 of Fig. 2, in which the iSCSI name is 
"default" and the WWN is "FFFFFFFF". 
==Flow of Conversion Processing== 

15 Here, a description will be given of processing of 

converting an IP packet of the iSCSI protocol received from 
the information processing device 10 into an FC frame and 
transmitting the FC frame to the storage device 30 in a state 
where the conversion table 2 8 and the security management table 

20 35 are stored as described above. 

First, the processing will be schematically described 
with reference to Fig. 5. An IP packet 500 received from the 
information processing device 10 includes an IP header 510 and 
an iSCSI protocol data unit 52 0. The IP header 510 includes 

25 a source IP address 511 and a destination IP address 512, which 
are used for data transfer through the LAN. The source IP 
address is an IP address of the information processing device 
10 and the destination IP address is an IP address of the network 
converter 20. The iSCSI protocol data unit 52 0 includes a login 

30 request header 521 and a login parameter 522. The login 
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parameter 522 includes an initiator iSCSI name 523 indicating 
a source in the iSCSI protocol and a target iSCSI name 52 4 
indicating a destination in the iSCSI protocol. The initiator 
iSCSI name 523 is an iSCSI name of the information processing 
5 device 10 and the target iSCSI name 524 is an iSCSI name of 
the storage device 30. 

The network converter 20 converts the IP packet 500 into 
an FC frame 530. The FC frame 530 includes an FC header 54 0 
and a PLOGI parameter 550. The FC header 540 includes a 

10 destination native address 541 (D_ID) and a source native 
address 542 (S_ID), which are native addresses used for data 
transfer through the Fibre Channel. The native addresses are 
allocated, for example , when the information processing device 
10, the storage device 30 or the like logs into a fabric of 

15 the Fibre Channel, and the like. The PLOGI parameter 550 
includes an N_Port_Name 551 and a Node__Name 552 of the 
information processing device 10 that is the source. 
Specifically, the network converter 2 0 converts the initiator 
iSCSI name 523 of the information processing device 10 into 

20 a WWN based on the conversion table 28 and sets the WWN to the 
N_Port_Name 551 and the Node_Name 552 of the FC frame 530. Upon 
receipt of the FC frame 530, the storage device 30 can determine 
access enable/disable from the information processing device 
10 based on the N_Port_Name 551 and the Node_Name 552. 

25 Next, details of the conversion processing will be 

described with reference to Fig. 6. First, the information 
processing device 10 transmits the IP packet 500 that is a login 
request of the iSCSI to the network converter (S601). 

The first identification number conversion section 26 of 

30 the network converter 20 obtains, from the conversion table 
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28, a WWN of the information processing device 10, which 
corresponds to the initiator iSCSI name 52 3 included in the 
IP packet 500 (S602). Here, when the initiator iSCSI name 523 
is not stored in the conversion table 28, the first 
5 identification number conversion section 2 6 obtains a WWN 
"FFFFFFFF" which has an iSCSI name "default" and controls access 
denial. Next, the first protocol conversion section 2 3 of the 
network converter 2 0 allows the information processing device 
10 to log into the fabric of the Fibre Channel (S603). Thus, 

10 the first protocol conversion section 2 3 obtains a native 
address of the information processing device 10 (S604). 

Next, the first identification number conversion section 
26 acquires, from the conversion table 28, a WWN of the storage 
device 30, which corresponds to the target iSCSI name 524 

15 included in the IP packet 500 (S605). The first protocol 
conversion section 23 acquires a native address of the storage 
device 30 based on the WWN of the storage device 30 (S606). 
Note that conversion of the WWN into the native address and 
conversion of the native address into the WWN can be acquired 

20 by use of a method such as contacting a name server of the Fibre 
Channel. The first protocol conversion section 23 forms the 
FC frame 530 by use of the native addresses of the information 
processing device 10 and the storage device 30, which are 
acquired as described above, and the WWN of the information 

25 processing device 10 and transmits the FC frame 53 0 to the 
storage device 30 (S607). 

Upon receipt of the FC frame 530, the controller 39 of 
the storage device 30 stores a combination of the WWN and the 
native address of the information processing device 10 in a 

30 login information storage table 701 shown in Fig. 7 and 
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transmits an ACC frame that is a notification of login 
completion to the network converter 20 (S608). 

Upon receipt of the ACC frame, the second protocol 
conversion section 24 of the network converter 20 acquires WWNs 
5 of the information processing device 10 and the storage device 
30 based on the native addresses of the information processing 
device 10 and the storage device 30 , which are included in the 
ACC frame (S609). Next, the second identification number 
conversion section 27 of the network converter 20 acquires iSCSI 

10 names corresponding to the WWNs of the information processing 
device 10 and the storage device 30 from the conversion table 
28 (S610) . The second protocol conversion section 24 forms an 
IP packet that is a login response of the iSCSI, which includes 
the iSCSI names of the information processing device 10 and 

15 the storage device 30, and transmits the IP packet to the 
information processing device 10 (S611). 

Upon receipt of the login response of the iSCSI, the 
information processing device 10 forms an IP packet including 
a SCSI command specifying a LUN of an access target and transmits 

20 the IP packet to the network converter 20 (S612). 

The first identification number conversion section 2 6 of 
the network converter 20 acquires, from the conversion table 
28, WWNs of the information processing device 10 and the storage 
device 30, the WWNs corresponding to an initiator iSCSI name 

25 and a target iSCSI name which are included in the IP packet 
(S613). Next, the first protocol conversion section 23 of the 
network converter 2 0 acquires native addresses of the 
information processing device 10 and the storage device 30 based 
on the WWNs of the information processing device 10 and the 

30 storage device 30 (S614). The first protocol conversion 
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section 2 3 forms an FC frame including the native address of 
the information processing device 10 and the LUN of the access 
target and transmits the FC frame to the storage device 30 
(S615) . 

5 The controller 39 of the storage device 30 acquires a WWN 

of the information processing device 10 from the login 
information storage table 701 based on the native address of 
the information processing device 10, which is included in the 
FC frame, and checks access enable/disable of the information 

10 processing device 10 based on the WWN and the LUN of the access 
target (S616). The storage device 30 forms an FC frame 
including a result of processing of the SCSI command and 
transmits the FC frame to the' network converter 2 0 (S617). 

Upon receipt of the FC frame, the second protocol 

15 conversion section 2 4 of the network converter 2 0 acquires WWNs 
of the information processing device 10 and the storage device 
30 based on the native addresses of the information processing 
device 10 and the storage device 30, which are included in the 
FC frame (S618). Next, the second identification number 

20 conversion section 27 of the network converter 20 acquires iSCSI 
names corresponding to the WWNs of the information processing 
device 10 and the storage device 30 from the conversion table 
28 (S619). The second protocol conversion section 24 forms an 
IP packet that is a result of processing of the SCSI command 

25 by use of the iSCSI names of the information processing device 
10 and the storage device 30 and transmits the IP packet to 
the information processing device 10 (S620). 

When the information processing device 10 receives the 
IP packet that is the result of processing of the SCSI command 

30 (S621), a series of processing from the login in the iSCSI to 
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the SCSI command execution is completed. Note that, in the 
series of processing, the processing performed by the 
information processing device 10 is a normal one in the iSCSI 
protocol. Thus, by using the network converter 20, it is not 
required to add new components and the like to the information 
processing device 10. Similarly, the processing performed by 
the controller 3 9 of the storage device 30 is a normal one in 
the Fibre Channel protocol. Thus, by using the network 
converter 20, it is not required to add new components and the 
like to the storage device 30. 

As described above, by using the above-described network 
converter 20, it is possible to communicate with the information 
processing device 10, which transmits /receives data according 
to the iSCSI protocol, in consideration of the LUN security 
without adding new components and the like to the storage device 
30 which transmits /receives data according to the 
conventionally used Fibre Channel protocol. Thus, it is 
possible to construct an information processing system, which 
makes effective use of existing resources. 

Moreover, the identification number conversion 
notification section of the management terminal 40 transmits, 
to the network converter 20, the combination of the iSCSI name 
and the WWN only for the storage device 30 and the information 
processing device 10 for which the access to the storage device 
30 is enabled. Specifically, the management terminal 40 is not 
required to generate a combination of an iSCSI name and a WWN 
for the information processing device 10 for which access is 
not enabled. Thus, it is possible to prevent unauthorized 
access to the storage device 30 from the information processing 
device 10. Moreover, in the conversion table 28 and the 
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security management table 35, only the information processing 
device 10 having access permission may be stored. Thus, memory 
resources can be saved. 
===Second Embodiment=== 

Next, Fig. 8 shows a block diagram of an entire 
configuration example of an information processing system 
including a network converter 2 0 according to a second 
embodiment . 

The information processing system according to this 
embodiment includes a storage device 1 (801), a network 
converter 1 (802), a network converter 2 (803) and a storage 
device 2 (804). The storage device 1 (801) and the network 
converter 1 (802) are connected to each other via a SAN so as 
to be communicable. Similarly, the storage device 2 (804) and 
the network converter 2 (803) are connected to each other via 
the SAN so as to be communicable. Moreover, the network 
converter 1 (802) and the network converter 2 (803) are 
connected to each other via a LAN so as to be communicable . 
Note that the respective storage devices (801 and 804) have 
the same configuration as that of the storage device 3 0 
according to the first embodiment. In addition, the respective 
network converters (802 and 803) have the same configuration 
as that of the network converter 20 according to the first 
embodiment . 

In such an information processing system, data 
transmission/reception between the storage devices 1 (801) and 
2 (804) in consideration of LUN security according to the Fibre 
Channel protocol can be performed through the LAN. Here, as 
an example, a description will be given of a case where the 
storage device 1 (801) transmits a data write request to the 
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storage device 2 (804). First, the storage device 1 (801) 
transmits an FC frame of a write request to a LUN of the storage 
device 2 (804) to the network converter 1 (802) (S801). The 
network converter 1 (802) transmits an IP packet to the network 
5 converter 2 (803) , the IP packet including iSCSI names acquired 
by converting WWNs of the respective storage devices (8 01 and 
804). The network converter 2 (803) transmits an FC frame to 
the storage device 2 (804 ) , the FC frame including WWNs acquired 
by converting iSCSI names of the respective storage devices 

10 (801 and 804) (S804). Based on the received FC frame, the 
storage device 2 (804) can execute write processing after 
determining access enable/disable to the LUN from the storage 
device 1 (801) . 

Note that the processing performed by the respective 

15 storage devices (801 and 804) in the series of processing is 
a normal one in the Fibre Channel protocol. Thus, by using the 
respective network converters (802 and 803) , it is not required 
to newly add components and the like to the respective storage 
devices (801 and 804). 

20 As described above, by use of the above-described network 

converters, between the storage devices which transmit/receive 
data according to the Fibre Channel protocol, data 
transmission/reception in consideration of LUN security can 
be performed through the LAN. Specifically, in such cases as 

25 when data is backed up between the storage devices, which 
transmit /receive data according to the Fibre Channel, as a means 
of disaster recovery, it is possible to use the LAN capable 
of constructing a long-distance network at lower cost than the 
SAN. 

30 Although the first and second embodiments have been 
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described above, the foregoing embodiments are for 
facilitating understanding of the present invention and not 
for interpreting the present invention by placing limitations 
thereon. The present invention can be changed and modified 
5 without departing from spirit of the invention. In addition, 
the present invention also includes equivalents thereof. 

For example, in the first and second embodiments, the LUN 
security is performed by using both of the Node_Name and the 
N_Port_Name. However, the LUN security may be performed by 

10 using any one of the Node_Name and the N_Port_Name . In this 
case, any one of the Node_Name and the N_Port_Name, which is 
used in the LUN security, may be stored in the conversion table. 

Moreover, in the first and second embodiments, the first 
protocol is the iSCSI protocol. However, the first protocol 

15 may be a protocol other than the iSCSI protocol. In this case, 
combinations of numbers for identifying the information 
processing device 10 and the storage device 30 according to 
the protocol and WWNs may be stored in the conversion table 
28. 

20 Although the preferred embodiment of the present 

invention has been described in detail, it should be understood 
that various changes, substitutions and alterations can be made 
therein without departing from spirit and scope of the 
inventions as defined by the appended claims. 
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